Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
File:                     dEXd7t-9ctMT6e6MzuroQDzDQUY.mft (raw, json)
Hash identifier:          WWOIZha0sEIhbrzjMcsK4iVmfwMB8lDtjPtBZ2szVjc=
Subject key identifier:   C2:46:7D:28:BD:FF:1D:84:DC:03:B4:4A:BD:29:44:46:7E:91:EA:7C
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Certificate issuer:       /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial:       019D9963081006DFCD252D556D571C963567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 03:01:37 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:37 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:37 +0000
Files and hashes:         1: J23raJoXXEduKZIZrRPiLi86VnA.roa (hash: v/0bTkNC6NTSIrnkHUjoMjqy5YU4u8PD1ywR+lNsXIw=)
                          2: M9XPPIauYu8vbc2Ub3NT2ITQt40.roa (hash: cI1UxjgAX2tnU9TBtap9O6a2kSTgffH3bwWkwVoWftk=)
                          3: QI0m8yxwMxD5ywSxfRkbyb2qPcE.roa (hash: 8djDX4kGY6Wd0AiK2DyOXGmoVTCo33Wju0Bfsfmfzlw=)
                          4: dEXd7t-9ctMT6e6MzuroQDzDQUY.crl (hash: K52koBZnIgSV6l96cFdQM/krjKyC2YeWhShwqLSDCY4=)
                          5: nP3EGicDZfiR5ZgckruxBJyoECY.roa (hash: BB5Uj3DY8cxr4Rb47wF34MrssQh6rDw+XyqbJxAmiXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:63:08:10:06:df:cd:25:2d:55:6d:57:1c:96:35:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
        Validity
            Not Before: Apr 17 03:01:37 2026 GMT
            Not After : Apr 18 03:01:37 2026 GMT
        Subject: CN=c2467d28bdff1d84dc03b44abd2944467e91ea7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e8:6c:e3:e9:2f:96:54:dd:d6:95:b8:1a:30:
                    9c:87:41:5a:e2:21:f2:21:43:51:21:d9:0c:33:8a:
                    68:a7:b6:3c:60:4d:22:8a:ba:de:af:59:59:ff:61:
                    59:00:10:01:7a:ad:33:a0:c4:92:59:81:27:d5:63:
                    93:01:90:82:d5:4b:85:08:c5:9d:1c:b2:8e:47:a8:
                    45:b9:24:0f:06:43:30:fe:9f:14:85:44:90:18:b4:
                    64:0a:55:fa:92:45:8e:83:d7:27:4f:0d:7c:a9:0a:
                    7d:13:ae:23:43:dd:30:64:72:4b:87:df:d3:38:f7:
                    bb:3e:f8:be:13:93:87:6f:cd:50:58:e5:9d:3f:93:
                    cc:7b:52:8c:fa:f8:d4:86:70:34:32:eb:20:d1:c6:
                    4b:1b:a4:04:7d:4e:03:3c:9a:8d:0b:4d:2d:9c:2e:
                    78:f4:24:72:14:1c:bd:16:3e:02:62:1f:6a:50:09:
                    bc:a6:91:d3:75:18:92:d5:d0:4f:f0:95:87:0d:7c:
                    68:d4:53:e6:ff:87:95:4c:d0:7b:3d:e0:91:47:15:
                    3a:97:c8:c6:bc:8a:f1:9f:b4:73:bb:16:b6:6b:5f:
                    f9:31:24:0d:c5:89:08:54:49:41:d8:20:06:c4:d3:
                    66:3b:48:73:b8:51:6a:a1:b8:9b:09:ae:b3:37:69:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:46:7D:28:BD:FF:1D:84:DC:03:B4:4A:BD:29:44:46:7E:91:EA:7C
            X509v3 Authority Key Identifier:
                keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:74:c5:19:8d:f3:d1:2f:1c:b7:2a:54:c8:e0:75:5d:8e:0f:
         13:64:13:3e:26:39:fe:e2:94:c3:44:9a:d5:52:95:58:95:50:
         e9:60:5c:4c:69:2f:6b:fe:f7:5c:f1:23:e3:7b:72:f0:e6:68:
         de:aa:73:7e:90:eb:f5:dd:de:40:a4:c1:c0:f3:6b:e2:79:36:
         c9:b4:73:d2:eb:5b:75:9d:c3:1a:ca:3e:2d:84:37:35:7f:44:
         f3:5e:a0:a1:e0:d3:83:6a:3f:de:d6:61:3d:62:3b:b0:64:02:
         a8:a7:66:50:6f:09:bc:69:8b:c8:d4:61:04:31:ed:73:69:34:
         cd:64:f0:85:76:12:32:37:b5:03:9d:d4:4b:4f:e2:e7:9d:64:
         dc:ee:41:65:67:f9:6c:2a:f4:f9:4f:ce:6d:29:68:b5:57:fb:
         6d:32:bc:74:87:91:b1:67:7e:f1:7b:d7:86:94:84:45:54:3b:
         10:5c:55:ce:fe:2e:a4:ba:4d:21:57:f3:98:28:70:7e:c8:fc:
         86:6f:38:3b:2a:55:8e:c7:17:eb:58:61:fd:20:a0:e8:9e:95:
         07:e9:ec:ba:fd:4d:2b:00:ba:2e:bd:63:28:6d:5e:08:ed:ec:
         99:8c:38:5a:52:93:3d:d7:dc:17:f3:6a:9d:62:33:5a:aa:fb:
         33:4f:d3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:36 2026 by rpki-client